After adding the CERT options to "localhost.mc" I was able to get 250-STARTTLS.

Another change I made was using 'make' as written in the man page, rather than 'm4 /usr/share/sendmail/m4/cf.m4 my.mc > sendmail.cf'. Using make did make permission changes to files though as noted in stdout.